Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138480/0/323430303a353061303a3a2f33322d3634203d3e203633383933.roa
File:                     323430303a353061303a3a2f33322d3634203d3e203633383933.roa (raw, json)
Hash identifier:          TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=
Subject key identifier:   FB:63:A8:4C:FF:0C:BE:31:C6:00:2A:8E:D7:4C:3D:8B:A5:43:55:06
Certificate issuer:       /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial:       6AD12488C89B5265EBE186FAA8A0D23034DE1347
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138480/0/323430303a353061303a3a2f33322d3634203d3e203633383933.roa
Signing time:             Mon 11 May 2026 17:15:49 +0000
ROA not before:           Mon 11 May 2026 17:10:49 +0000
ROA not after:            Mon 10 May 2027 17:15:49 +0000
asID:                     63893
IP address blocks:        2400:50a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:24:88:c8:9b:52:65:eb:e1:86:fa:a8:a0:d2:30:34:de:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
        Validity
            Not Before: May 11 17:10:49 2026 GMT
            Not After : May 10 17:15:49 2027 GMT
        Subject: CN=FB63A84CFF0CBE31C6002A8ED74C3D8BA5435506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:c3:2a:ae:18:40:21:39:3a:c9:49:33:6f:
                    e5:8c:b1:02:12:2c:8c:cd:37:bb:eb:f0:5f:76:b0:
                    e2:53:a9:b5:8a:5b:52:8a:d6:c2:16:e7:19:fe:98:
                    37:08:dd:bf:7e:1b:3f:cd:fd:94:b4:eb:c9:db:fb:
                    d5:65:63:92:c8:fb:8c:61:5d:a1:1d:c7:84:8d:f5:
                    8b:42:bb:8c:8d:88:45:86:51:26:d2:f7:92:69:14:
                    4f:6d:97:5c:63:2c:cc:85:ff:3b:7b:68:b3:e2:4e:
                    ac:c6:74:7f:31:1f:bf:66:12:b7:2b:2e:1f:59:60:
                    fa:27:62:12:37:a4:23:51:fe:46:1a:f3:4a:18:4f:
                    95:b4:aa:02:ef:c0:e5:7f:17:5e:bd:73:1b:98:a2:
                    50:2b:bb:77:26:1e:25:94:7a:c2:9e:a4:d3:26:e5:
                    0f:bb:95:d5:d8:83:66:e9:1e:56:70:b7:8b:ac:9c:
                    92:d4:e0:36:ba:48:81:cb:f4:47:57:0f:b4:24:f1:
                    34:f0:86:98:98:70:90:8e:76:fb:8f:16:ec:9e:a2:
                    b2:9a:20:eb:e8:60:8c:22:27:06:60:32:50:72:06:
                    05:e3:8a:77:51:79:bc:b2:6f:54:e9:d3:c2:13:e4:
                    fe:b9:b1:c2:35:31:27:8e:55:93:57:fb:63:31:23:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:63:A8:4C:FF:0C:BE:31:C6:00:2A:8E:D7:4C:3D:8B:A5:43:55:06
            X509v3 Authority Key Identifier:
                keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/323430303a353061303a3a2f33322d3634203d3e203633383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:50a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:68:4f:99:e1:c4:c3:ac:0c:3e:75:06:68:59:56:00:3f:7a:
         98:dd:ea:43:a3:1a:7d:ad:ac:21:40:65:30:8c:28:9d:af:9f:
         8d:f9:c7:ac:60:63:df:78:71:d8:c3:b4:b2:e9:12:77:5b:3b:
         e0:15:28:48:84:c4:5c:e9:71:1a:57:b3:82:db:ff:9a:9d:4b:
         9c:86:15:e9:c2:c8:05:a6:8e:05:e4:00:fe:b2:a0:c1:a3:c2:
         6e:bc:b7:75:de:3a:05:eb:65:cc:4a:e4:3c:42:a6:9b:93:c8:
         14:99:c6:96:f4:f2:90:06:ab:31:41:fb:42:42:45:6b:d2:e2:
         0a:2f:7c:74:6b:6c:45:26:2d:3c:31:a4:c8:22:55:46:59:4b:
         3b:b8:cd:85:a0:a5:ce:29:4e:75:73:9f:ea:99:64:45:04:ee:
         af:6c:a6:d5:e2:ed:46:32:73:59:dc:50:c0:35:ba:9e:f5:08:
         71:7a:06:d0:1e:b4:e9:17:a8:03:f0:03:2d:fc:1e:ed:41:10:
         b6:46:bb:b5:ad:92:61:0e:4f:10:fe:98:8e:3d:57:12:2e:07:
         08:c3:02:03:39:2b:21:c7:78:f3:25:74:4d:e0:c1:fb:54:e8:
         af:67:c1:d3:dc:8c:d6:37:40:44:43:de:d3:14:fb:39:5c:23:
         c4:bb:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:44 2026 by rpki-client